I added a conversion from unicode to encoded utf-8 when password is first received, so we don't need to add a check here. Is that reasonable?